{"id":"thehackernews-059d0a92d893","seq":189168,"kind":"news","title":"New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification","url":"https://thehackernews.com/2026/10/new-qpack-flaws-can-crash-http3-servers.html","permalink":"https://vulnpulse.app/items/thehackernews-059d0a92d893","summary":"A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory to a much larger set, the attacker can force the server to use thousands of times more memory than it received, enough to run a default server","severity":null,"techs":[],"cves":[],"tags":["security"],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-22T06:38:31.000Z","fetched_at":"2026-10-22T09:11:50.540Z"}